Results 1 to 15 of 15
  1. #1
    New Lounger
    Join Date
    Jan 2003
    Posts
    10
    Thanks
    0
    Thanked 0 Times in 0 Posts

    RPC service terminates (XP Pro)

    Just installed XP Pro last night on my P4 1.6ghz generic computer. Install went fine. However, I now periodically get a message saying "The system is shutting down. This shutdown was initiated by NT AUTHORITY/SYSTEM. Windows must now restart because the Remote Procedure Call (RRPC) service terminated unexpectedly." After 60 seconds, the computer reboots. So far, this problem seems to occur only after I've connected to the net (56k dial-up). It is not immediate; sometimes it happens within 20-30 seconds and other times after several minutes. I can't identify anything that I'm doing that triggers the message. I reformatted the HD before installing XP and, besides XP, have installed only Office 2003 and Earthlink Total Access 2004 software.

    I was using W2K before XP and was having a similar problem with the "svchost" (?) or something like that quitting. After it quit, I lost certain functionality (couldn't copy/paste, couldn't disconnect from net, etc.). I just thought it was corrupt software or something, which is why I decided to start from scratch with XP. Does anyone have an idea what might be causing the problem or how to go about troubleshooting it? Sorry for the long post. Many thanks,

    Phil

  2. #2
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: RPC service terminates (XP Pro)

    According to information found here, "It is a virus that started spreading very quickly on August 11, 2003. It works by exploiting unpatched Windows 2000/XP computers. It's been named Lovesan (LovSan, LuvSan) or Blaster." I don't know how it would have survived a reformat before installing XP, but from what you are saying, it seems to nave done just that. I'll check further. Meantime, go to an online site and scan for viruses or install, update and run your own virus software.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  3. #3
    Plutonium Lounger
    Join Date
    Oct 2001
    Location
    Lexington, Kentucky, USA
    Posts
    12,107
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: RPC service terminates (XP Pro)

    Check out this link to see if there's any help for you. I've not had the problem, so I can't say.....

  4. #4
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: RPC service terminates (XP Pro)

    You have the Blaster worm. See What You Should Know About the Blaster Worm and Its Variants and W32.Blaster.Worm.

    Symantec has a <A target="_blank" HREF="http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html">W32.Blaster.Wo rm Removal Tool
    </A> available for download.

  5. #5
    Uranium Lounger viking33's Avatar
    Join Date
    Jun 2002
    Location
    Cape Cod, Massachusetts, USA
    Posts
    6,308
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: RPC service terminates (XP Pro)

    Get yourself a FIREWALL installed immediately if not sooner ! Also an anti-virus prog. As Al & Hans said, you have the blaster worm & who knows what else ! <img src=/S/fire.gif border=0 alt=fire width=15 height=15>

    Bob
    BOB
    http://lounge.windowssecrets.com/S/flags/USA.gif http://lounge.windowssecrets.com/S/f...sachusetts.gif


    Long ago, there was a time when men cursed and beat on the ground with sticks. It was called witchcraft.
    Today it is called golf!

  6. #6
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC service terminates (XP Pro)

    XP has a built in firewall called the ICF and I don't know anyone who considers it competent, but it's better than nothing--there are even free firewalls that are better--and Microsoft now has a slide they show to IT types at a presentations for security that has a number of firewalls they recommend besides the XP ICF I saw them use today:

    See Post 308243.

    SMBP

  7. #7
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: RPC service terminates (XP Pro)

    ICF is virtually useless. It only blocks inbound traffic. As SMBP states, it is better than nothing. But not much. If it's all you want information on how to use it can be found here.

    I would recommend the <img src=/S/free.gif border=0 alt=free width=30 height=15> version of ZoneAlarm from ZoneLabs.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  8. #8
    Uranium Lounger viking33's Avatar
    Join Date
    Jun 2002
    Location
    Cape Cod, Massachusetts, USA
    Posts
    6,308
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: RPC service terminates (XP Pro)

    SMBP,

    I think you should have aimed your post reply to "bigfilo", not me. I am well aware of ICF and it's shortcomings, using ZoneAlarm myself. <img src=/S/bingo.gif border=0 alt=bingo width=15 height=22>

    Bob
    BOB
    http://lounge.windowssecrets.com/S/flags/USA.gif http://lounge.windowssecrets.com/S/f...sachusetts.gif


    Long ago, there was a time when men cursed and beat on the ground with sticks. It was called witchcraft.
    Today it is called golf!

  9. #9
    2 Star Lounger
    Join Date
    May 2002
    Location
    Nr. Edinburgh, Fife, Scotland
    Posts
    166
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC service terminates (XP Pro)

    Doc,
    I have heard that Blaster (and goodness knows how many more of them) are continually scanning for victims. If you have just installed XP and then go to get the Updates to patch the holes, you are liable to be hit by Blaster before you can even get the Updates. I think this is one of the reasons Microsoft released the Rollup which can be put on a CD and hence remove the danger when getting the Updates. I have come across other people who got Blaster before managing to download the Patches. Drastic, but haven`t seen a warning anywhere .

    Elaine

  10. #10
    2 Star Lounger
    Join Date
    May 2002
    Location
    Nr. Edinburgh, Fife, Scotland
    Posts
    166
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC service terminates (XP Pro)

    Yes. That agrees with what I have been told. I sometimes get warnings from a guy in a little local computer company, and he has been telling me how active Blaster etc. still are. A great deal of their work lately has been concerned with fixing infected systems, many of them being new systems where the people just hadn`t a clue. They try to explain to customers about updating everything regularly but most do not bother. He was really mad, because as we all know, people like that are responsible for spreading these plagues even further.They are trying to get everyone patched with a Rollup CD, but know that when the next Worm comes along it will all start again. Even now, how many people know that after a repair or installation they are likely to get infected while getting the patches back from the Microsoft site? Very few, I`d bet.

    Elaine

  11. #11
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: RPC service terminates (XP Pro)

    I'd bet most people have a hard time remembering to bathe and change their skivies, let alone update their antivirus software and patch their OS. <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15>

    We all have to suffer other's bad driving habits, so why not bad computing habits as well ?????

    In a perfect world ................ oh, never mind. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  12. #12
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: RPC service terminates (XP Pro)

    Just an update to my previous post. I saw my friend today and his machine was definitely infected with the blaster worm. I had burned a copy of the removal tool from Symantec and a copy of the blaster update patch from MS onto a CD. Ran the tool and that squashed the worm. Then installed the patch. Good to go !!!
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  13. #13
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: RPC service terminates (XP Pro)

    Hi Elaine,

    I read that today while I was poking around for info on this issue. Unfortunately, I didn't mark the page and now can't retrace my steps. There is some info on that subject here, but I know I saw a more through explaination of how this bug acquires new victims, and it referenced the MS Update site as a source of infection. Something to the effect that when you go to the update site your ports are scanned by the virus from other infected systems and if you aren't patched it loads you up and you can't access the update site. I know this sounds a bit far fetched, but I am pretty sure that's the gist of the story. I'll try to find my source on that and post back.

    As a point of interest, I believe I may have gotten a friend's laptop infected the other day. I'm reconfiguring his machine and it had no antivirus and no firewall installed. It was having problems logging on to the internet and when I finally got it to log on I wanted to DL ZoneAlarm and before I could do that I got the RPC error message and the machine shut down. The reason I suspect that it happened just then and not earlier is that the previous owner (my friend's mother) passed away in July and she hadn't been on the internet since March. That's pre-blaster. So that sort of proves the theory that if you're on the net with an unprotected and unpatched XP system, you are vulnerable !!!
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  14. #14
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC service terminates (XP Pro)

    Aware you are aware--a misaim or a missed aim to be sure--sorry.

    SMBP

  15. #15
    Uranium Lounger viking33's Avatar
    Join Date
    Jun 2002
    Location
    Cape Cod, Massachusetts, USA
    Posts
    6,308
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: RPC service terminates (XP Pro)

    SMBP.

    No problem! <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>

    Bob
    BOB
    http://lounge.windowssecrets.com/S/flags/USA.gif http://lounge.windowssecrets.com/S/f...sachusetts.gif


    Long ago, there was a time when men cursed and beat on the ground with sticks. It was called witchcraft.
    Today it is called golf!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •